PT-2005-3655 · Id · Lithium Ii Mod

Sinnull · Published 2005-09-02 · Updated 2017-07-11 · CVE-2005-2774

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Lithium II mod version 1.24 for Quake 2

Description The issue allows remote attackers to cause a denial of service, potentially leading to a server crash, and may also enable the execution of arbitrary code. This is achieved through the use of format string specifiers in the nickname.

Recommendations For Lithium II mod version 1.24, consider restricting or validating user input for the nickname field to prevent the use of malicious format string specifiers until a patch is available.

Fix

Related Identifiers

CVE-2005-2774

Affected Products

Lithium Ii Mod

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-2774 · Security Note
• http://securityfocus.com/bid/14664 · Note
• http://marc.info/?l=bugtraq&m=112500372617684&w=2 · Note
• http://secunia.com/advisories/16585 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22013 · Note